[gnuastro-commits] master 1f39de3 3/5: Book: Add known issue with imagemagick

[Mohammad Akhlaghi]

branch: master
commit 1f39de381c4b6ed3f108be581f1ea67b50aabe61
Author: Pedram Ashofteh Ardakani <pedramardakani@pm.me>
Commit: Pedram Ashofteh Ardakani <pedramardakani@pm.me>

    Book: Add known issue with imagemagick
    
    This issue rised when I ran 'make check' in '/dev/shm/' after the
    './developer-build -I' command.
---
 doc/gnuastro.texi | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/doc/gnuastro.texi b/doc/gnuastro.texi
index 679a390..a896cbf 100644
--- a/doc/gnuastro.texi
+++ b/doc/gnuastro.texi
@@ -6753,9 +6753,22 @@ export LD_LIBRARY_PATH="$LD_LIBRARY_PATH:/usr/local/lib"
 You can also add more directories by using a colon `@code{:}' to separate them.
 See @ref{Installation directory} and @ref{Linking} to learn more on the 
@code{PATH} variables and dynamic linking respectively.
 
+@cindex Tests, error in converting images
+@item
+@command{$ make check}: @emph{There is an error with converting images} The 
error might be as follows:
+@code{convert: attempt to perform an operation not allowed by the security 
policy `gs' @ error/delegate.c/ExternalDelegateCommand/378.}
+This error is a known 
issue@footnote{@url{https://wiki.archlinux.org/title/ImageMagick}} with 
@code{ImageMagick} security policies, which states:
+@code{imagemagick} uses Ghostscript for PDF, EPS, PS and XPS parsing.
+Because there have been multiple vulnerabilities with 
Ghostscript@footnote{@url{https://security.archlinux.org/package/ghostscript}}, 
it is compiled without Ghostscript library.
+It would fall back to gs command instead, but that is, by default, disabled in 
@code{/etc/ImageMagick-7/policy.xml} with the following line:
+
+@example
+<policy domain="delegate" rights="none" pattern="gs" />
+@end example
+
 @cindex GPL Ghostscript
 @item
-@command{$ make check}: @emph{The tests relying on external programs (for 
example @file{fitstopdf.sh} fail.}) This is probably due to the fact that the 
version number of the external programs is too old for the tests we have 
preformed.
+@command{$ make check}: @emph{The tests relying on external programs (for 
example @file{fitstopdf.sh} fail.)} This is probably due to the fact that the 
version number of the external programs is too old for the tests we have 
preformed.
 Please update the program to a more recent version.
 For example to create a PDF image, you will need GPL Ghostscript, but older 
versions do not work, we have successfully tested it on version 9.15.
 Older versions might cause a failure in the test result.